CVE-2025-5119

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2025-5119

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-5119.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2025-5119

Published

2025-05-23T21:00:11.879Z

Modified

2026-07-08T08:12:06.215616659Z

Severity

6.9 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N CVSS Calculator

Summary

Emlog Pro api_controller.php sql injection

Details

A vulnerability has been found in Emlog Pro 2.5.11 and classified as critical. This vulnerability affects unknown code of the file /include/controller/api_controller.php. The manipulation of the argument tag leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure and confirmed the existence of the vulnerability.

Database specific

{
    "unresolved_ranges": [
        {
            "source": "AFFECTED_FIELD",
            "extracted_events": [
                {
                    "introduced": "2.5.11"
                },
                {
                    "last_affected": "2.5.11"
                }
            ]
        }
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/5xxx/CVE-2025-5119.json",
    "cna_assigner": "VulDB",
    "cwe_ids": [
        "CWE-74",
        "CWE-89"
    ]
}

References

Affected packages

Git / github.com/emlog/emlog

Affected ranges

Type

GIT

Repo

https://github.com/emlog/emlog

Events

Introduced

9770e473eebd3f472d25b93819ffd3bae3b458da

Last affected

9770e473eebd3f472d25b93819ffd3bae3b458da

Database specific

{
    "source": "CPE_STRING",
    "cpe": "cpe:2.3:a:emlog:emlog:2.5.11:*:*:*:pro:*:*:*",
    "extracted_events": [
        {
            "introduced": "2.5.11"
        },
        {
            "last_affected": "2.5.11"
        }
    ]
}

Affected versions

2.*

2.5.11

pro-2.*

pro-2.5.11

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-5119.json"